Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/1/FE95FB960D3BED768A7CDFB21CEBEF5632FEB7F4.mft
File:                     FE95FB960D3BED768A7CDFB21CEBEF5632FEB7F4.mft (raw, json)
Hash identifier:          XrjZ7yPF+wtWl2fRwVKEw2OiU8pqCWHKhIKEFhXhL/8=
Subject key identifier:   5A:FD:45:2C:71:4F:FA:02:E4:30:86:8F:A0:3A:E2:44:DA:F1:9C:ED
Authority key identifier: FE:95:FB:96:0D:3B:ED:76:8A:7C:DF:B2:1C:EB:EF:56:32:FE:B7:F4
Certificate issuer:       /CN=FE95FB960D3BED768A7CDFB21CEBEF5632FEB7F4
Certificate serial:       496294D52E3F1130AB1EE2C8732F7AF071722C97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE95FB960D3BED768A7CDFB21CEBEF5632FEB7F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/1/FE95FB960D3BED768A7CDFB21CEBEF5632FEB7F4.mft
Manifest number:          42
Signing time:             Wed 22 May 2024 17:35:51 +0000
Manifest this update:     Wed 22 May 2024 17:30:51 +0000
Manifest next update:     Thu 23 May 2024 17:55:51 +0000
Files and hashes:         1: 323830343a366334343a3a2f33322d3336203d3e20323730343536.roa (hash: 7pzRV2ICCiNZW0cxjJjJRdEIR2Qq3byV6d6+D6PPBiU=)
                          2: 3139302e3132342e3235322e302f32322d3234203d3e20323730343536.roa (hash: QbFApv9uB66ixe2/1haodS7GJsXtaq/YbPKmWzmQNBo=)
                          3: FE95FB960D3BED768A7CDFB21CEBEF5632FEB7F4.crl (hash: K6Sh2lv2mUYLnmxVtqb8MG5jkwXyYpJn0p22DQCZfPo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:62:94:d5:2e:3f:11:30:ab:1e:e2:c8:73:2f:7a:f0:71:72:2c:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE95FB960D3BED768A7CDFB21CEBEF5632FEB7F4
        Validity
            Not Before: May 22 17:30:51 2024 GMT
            Not After : May 23 17:55:51 2024 GMT
        Subject: CN=5AFD452C714FFA02E430868FA03AE244DAF19CED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:58:40:25:53:ce:2b:b8:6d:c1:26:5d:5f:9a:
                    64:0e:66:20:31:f8:5d:f9:4d:e0:a5:19:84:5c:38:
                    40:12:23:1e:2d:0d:9b:e3:1c:bc:09:2d:90:e2:e9:
                    6b:a0:14:f6:25:f7:9a:50:06:40:a2:74:aa:58:91:
                    04:93:99:b7:64:25:84:f3:97:43:03:0a:9e:56:4c:
                    a7:be:c9:ab:97:b9:2e:b8:1d:78:b2:e7:5e:b3:5b:
                    03:3f:ad:e8:d8:31:7d:ca:68:7b:be:23:14:ff:86:
                    28:96:04:a4:e0:5d:b6:3c:d9:64:5a:b3:13:79:46:
                    e7:d3:1a:ff:de:5d:01:67:21:c7:7d:cd:cb:32:af:
                    9f:94:ec:d3:69:05:f8:0e:ad:45:f9:27:29:0c:0e:
                    aa:88:9f:88:d8:47:ad:71:64:1e:1b:9d:4a:54:48:
                    e3:d1:df:1a:c9:1b:54:f3:23:e1:ac:21:01:f2:0a:
                    0e:36:20:bc:2d:cf:c3:fb:a3:87:2e:8b:2d:e7:67:
                    ea:40:17:27:ad:51:d5:fc:55:18:72:b6:0f:c6:87:
                    2d:64:96:d5:16:f4:18:e3:27:11:56:dd:61:9a:d2:
                    e5:ff:5a:43:46:88:80:5f:6b:f0:33:c6:bd:80:a2:
                    65:c0:f8:9f:f4:1a:c9:ee:f4:f5:06:45:bc:36:d9:
                    96:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:FD:45:2C:71:4F:FA:02:E4:30:86:8F:A0:3A:E2:44:DA:F1:9C:ED
            X509v3 Authority Key Identifier:
                keyid:FE:95:FB:96:0D:3B:ED:76:8A:7C:DF:B2:1C:EB:EF:56:32:FE:B7:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/1/FE95FB960D3BED768A7CDFB21CEBEF5632FEB7F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE95FB960D3BED768A7CDFB21CEBEF5632FEB7F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/1/FE95FB960D3BED768A7CDFB21CEBEF5632FEB7F4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:44:56:d8:62:60:6d:9e:3d:d0:8b:77:92:25:d3:c4:64:38:
         d1:18:1e:f3:f7:7e:cd:47:bb:dd:aa:42:52:f6:a9:9d:f3:d9:
         8d:82:2c:2a:84:f1:73:08:4a:2d:ef:ad:8f:39:2e:2e:7e:14:
         ca:6b:11:78:29:d2:b8:ec:f5:e0:c8:b6:26:64:9b:e3:61:74:
         fa:12:0f:87:40:9c:15:b9:aa:42:15:6d:4b:c9:7b:0b:ed:57:
         2b:70:fc:f5:a2:48:07:d1:69:19:13:44:e2:fe:a9:ae:2e:f2:
         97:3a:73:db:51:db:df:61:8e:30:dd:a6:00:0c:ea:5d:e4:74:
         b4:bc:05:51:ae:91:03:fb:eb:3f:31:46:36:ca:f5:57:66:69:
         3c:9f:65:8e:bb:eb:a4:1d:d5:08:b7:5f:e2:f6:18:98:04:97:
         47:ab:96:00:cd:f4:1e:57:21:38:86:24:6c:b6:00:e7:0a:41:
         e4:59:15:42:d7:09:a5:9e:e8:61:b8:e7:5c:2a:4c:8c:45:fb:
         bb:a4:6c:5f:2d:16:39:e6:a0:a4:f8:88:05:7d:34:0a:62:73:
         c8:fe:d7:03:48:7b:fb:5e:a3:ae:5c:0b:40:f5:ea:b9:e6:fa:
         b8:1a:c3:74:58:fe:e5:ee:7b:b5:12:8e:ac:21:17:36:2c:e8:
         8b:ed:33:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----